Saturday 17 May 2014

How to Configure Proxy Settings Using Group Policy Management

To configure proxy settings using Group Policy Management with the Barracuda Web Security Service, first configure your group policy object using the Microsoft Group Policy Management Tool. Click Start > A4 >Programs > Administrative Tools > Group Policy Management.

Using the Microsoft Group Policy Management Tool

Create a New Group Policy Object (GPO)
  1. In the Group Policy Management window, under Domains, right-click the domain name.
  2. Select Create and Link a GPO Here. The New GPO window appears.
  3. Enter an intuitive Name for the GPO, such as Web Security Service Proxy Policy.
  4. Click OK.
Change the GPO Status
The new GPO appears in the left pane under the specified domain.
  1. Select the policy proxy GPO.
  2. In the right pane, click the Details tab, and then change the GPO Status to User configuration
    settings disabled. This minimizes the parts of the GPO that are applied, so that users can log on more quickly.
Edit the GPO
  1. In the left pane, right-click the proxy policy GPO, then click Edit.
  2. In the Group Policy window, in the left pane:
    • Select User Configuration.
    • Select Windows Settings.
    • Select Internet Explorer Maintenance.
    • Select Connection, then double-click Automatic Browser Configuration in the right pane.
  3. On the Automatic Configuration tab:
    • Select Automatically detect configuration settings and Enable Automatic Configuration.
    • Enter an interval in the Automatically configure every checkbox.
    • Enter the Barracuda Web Security Gateway's URL, followed by /proxy.pac in the Auto-proxy URL box. 
      Example: http://123.123.123.123/proxy.pac    If you are hosting your PAC file in another location, use that URL. Click OK.
  4. Navigate to User Configuration > Windows Settings > Internet Explorer Maintenance.
  5. Clear Automatically detect configuration settings.
  6. Select Enable Automatic Configuration.
  7. Select Auto-proxy URL. Enter the Barracuda Web Security Gateway's URL, followed by /proxy.pac in the Auto-proxy URL box. If you are hosting your PAC file in another location, use that URL.
    Example: http://123.123.123.123/proxy.pac 
  8. In the Computer Configuration area navigate to Administrative Templates > System/Group Policy, and then use the following settings to maintain consistency and compliance of the web browser’s settings:
    • Select Internet Explorer Maintenance policy processing.
    • Select Allow processing across a slow network connection.
    • Clear Do not apply during periodic background processing.
    • Select Process even if the Group Policy objects have not changed.
For Firefox Users
Barracuda recommends FirefoxADM for allowing centrally managed locked and/or default settings in Firefox via Group Policy Templates in Active Directory. More information is available at http://sourceforge.net/projects/firefoxadm/.
Secure the Proxy Settings
After you enable the proxy settings, you should disable users’ ability to change them.
  1. In the Group Policy window, in the left pane:
    • Select User Configuration.
    • Select Administrative Templates.
    • Select Windows Components.
    • Select Internet Explorer.
  2. In the right pane, scroll down to and right-click Disable changing proxy settings. Select Properties, and then selectEnabled.
  3. Click Apply, and then click OK twice. Users now cannot change their proxy settings.

No comments:

Post a Comment